Privacy Policy

Overview

MOMENT ("we", "our") lets you leave location-locked digital Moments — photos, video, audio, and notes — to unlock later at a place that matters. This policy explains what we collect and how we use it.

What we collect

• Account info: email address if you sign in with a magic link
• Moment content: titles, notes, media you attach, place names, and map coordinates you choose
• Location: your device GPS (with permission) to unlock Moments near the drop point — used on-device for distance checks. Native app builds may also request camera, microphone, or photo library access when you attach media
• Guest mode: without an account, Moments stay in your browser storage on that device
• Shares: recipient name / email and optional PIN when you send a private Moment
• Product analytics: anonymous traffic via Vercel Analytics (not Moment contents)

How we use your data

We use your data to run MOMENT: store and sync Moments you create, unlock them at the right place, deliver private shares you send, optionally email you a one-time notice when someone unlocks a Moment you shared (like a read receipt), and improve reliability. We do not sell your personal data.

Data storage

Signed-in Moments sync via Supabase (encrypted in transit and at rest). Guest-mode data stays on your device unless you sign in or share a link. Large media may remain device-local until cloud Storage is enabled for your project.

Third-party services

• Supabase — auth and database (supabase.com/privacy)
• Vercel — hosting and Analytics (vercel.com/legal/privacy-policy)
• Resend — transactional email for magic links and optional “Moment opened” read-receipt notices when configured (resend.com/legal/privacy-policy)
• OpenStreetMap / Nominatim — map tiles and place search (no Moment contents sent)

Location & sharing

Moments you drop are private by default. Shared Moments are only accessible to people you choose (secret link and/or account email). Recipients still need to be at the place to unlock content. When they unlock a secret link you created while signed in, we may email your account address once and show an “Opened” status in Profile. Do not leave Moments that put anyone at risk or reveal sensitive personal information of others without consent.

Children

MOMENT is for adults (18+) only. It is not directed at children under 13 (or the equivalent age in your region), and we do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will delete it.

Your rights

You may access, correct, or delete your data. Signed-in users can delete their account in Account settings. You can also email marshallbuchner96@gmail.com.

Changes to this policy

We may update this policy from time to time. Continued use of MOMENT after changes constitutes acceptance of the updated policy.

Contact

Questions? Email marshallbuchner96@gmail.com or visit Support.